@mastra/factory 0.23.0-alpha.1 → 0.23.0-alpha.2

package/dist/supervisor/session.d.ts

@@ -7,6 +7,7 @@
 import type { MastraCodeState } from '@mastra/code-sdk/schema';
 import type { AgentController } from '@mastra/core/agent-controller';
 import type { RequestContext } from '@mastra/core/request-context';
+import type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';
 import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
 import type { SupervisorScope } from './read-tools.js';
 type FactorySession = Awaited<ReturnType<AgentController<MastraCodeState>['createSession']>>;
@@ -30,7 +31,8 @@ export declare function resolveSupervisorScope(options: {
  * that are not supervisors are left untouched.
  */
 export declare function hydrateSupervisorSession(session: FactorySession, deps: {
-    projects: Pick<FactoryProjectsStorage, 'getById'>;
+    projects: FactoryProjectsStorage;
+    modelDefaults: ModelDefaultsStorage;
 }): Promise<void>;
 export {};
 //# sourceMappingURL=session.d.ts.map

package/dist/supervisor/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/supervisor/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAiC,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAInE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAIvD,KAAK,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAE7F,wBAAgB,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAI9F;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;CAC/C,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAWlC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE;IAAE,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAA;CAAE,GAC1D,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/supervisor/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAiC,MAAM,+BAA+B,CAAC;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAIvD,KAAK,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAE7F,wBAAgB,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAI9F;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;CAC/C,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAWlC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE;IACJ,QAAQ,EAAE,sBAAsB,CAAC;IACjC,aAAa,EAAE,oBAAoB,CAAC;CACrC,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/supervisor/session.js

@@ -1,5 +1,6 @@
 import { getFactoryAuthOrgId, getFactoryAuthUserFromContext } from "../auth.js";
-import { hydrateFactorySession } from "../session/factory-session.js";
+import { primeTenantCredentialsForTenant } from "../routes/tenant-credentials.js";
+import { hydrateFactorySession, resolveFactorySessionModel } from "../session/factory-session.js";
 //#region src/supervisor/session.ts
 const RESOURCE_PREFIX = "factory-supervisor:";
 function supervisorResourceId(factoryProjectId) {
@@ -46,13 +47,29 @@ async function hydrateSupervisorSession(session, deps) {
 	if (!factoryProjectId) return;
 	const project = await deps.projects.getById({ id: factoryProjectId });
 	if (!project) return;
+	const sessionModel = await resolveFactorySessionModel({
+		projects: deps.projects,
+		modelDefaults: deps.modelDefaults,
+		factoryProjectId,
+		orgId: project.orgId,
+		ownerUserId: project.createdBy
+	});
 	await session.state.set({
 		factoryProjectId,
-		factoryOrgId: project.orgId
+		factoryOrgId: project.orgId,
+		factoryModelScope: sessionModel.modelScope,
+		factoryOwnerUserId: project.createdBy
+	});
+	await primeTenantCredentialsForTenant({
+		orgId: project.orgId,
+		userId: project.createdBy,
+		credentialScope: sessionModel.modelScope
 	});
 	await hydrateFactorySession(session, {
 		orgId: project.orgId,
-		defaultModelId: project.defaultModelId ?? void 0
+		modelScope: sessionModel.modelScope,
+		ownerUserId: project.createdBy,
+		defaultModelId: sessionModel.modelId
 	});
 }
 //#endregion

package/dist/supervisor/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","names":[],"sources":["../../src/supervisor/session.ts"],"sourcesContent":["/**\n * The supervisor session: one per factory, addressed by a self-describing\n * resourceId so a restarted server can recover its scope without a lookup\n * table. The session has no repository, no sandbox and no work-item seat —\n * its tools talk to storage directly.\n */\n\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController, AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport { getFactoryAuthOrgId, getFactoryAuthUserFromContext } from '../auth.js';\nimport { hydrateFactorySession } from '../session/factory-session.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SupervisorScope } from './read-tools.js';\n\nconst RESOURCE_PREFIX = 'factory-supervisor:';\n\ntype FactorySession = Awaited<ReturnType<AgentController<MastraCodeState>['createSession']>>;\n\nexport function supervisorResourceId(factoryProjectId: string): string {\n  return `${RESOURCE_PREFIX}${factoryProjectId}`;\n}\n\n/** The supervisor thread shares the session's id: one thread per factory. */\nexport function supervisorThreadId(factoryProjectId: string): string {\n  return supervisorResourceId(factoryProjectId);\n}\n\nexport function parseSupervisorResourceId(resourceId: string | undefined | null): string | null {\n  if (!resourceId?.startsWith(RESOURCE_PREFIX)) return null;\n  const factoryProjectId = resourceId.slice(RESOURCE_PREFIX.length);\n  return factoryProjectId.length > 0 ? factoryProjectId : null;\n}\n\n/**\n * Scope a request to a supervisor session the caller is allowed to drive:\n * the resourceId must name a project, and the caller's org must own it.\n * Anything else yields null and the supervisor tools stay unregistered.\n */\nexport async function resolveSupervisorScope(options: {\n  requestContext: RequestContext | undefined;\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n}): Promise<SupervisorScope | null> {\n  const { requestContext } = options;\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const factoryProjectId = parseSupervisorResourceId(context?.resourceId);\n  if (!factoryProjectId) return null;\n  const orgId = getFactoryAuthOrgId(getFactoryAuthUserFromContext(requestContext));\n  if (!orgId) return null;\n  const project = await options.projects.get({ orgId, id: factoryProjectId });\n  if (!project) return null;\n  return { orgId, factoryProjectId };\n}\n\n/**\n * Session-start hook: stamp the owning project onto a supervisor session and\n * apply the factory's default model. Runs on every (re)creation so a restarted\n * server heals the in-memory state. Sessions\n * that are not supervisors are left untouched.\n */\nexport async function hydrateSupervisorSession(\n  session: FactorySession,\n  deps: { projects: Pick<FactoryProjectsStorage, 'getById'> },\n): Promise<void> {\n  const factoryProjectId = parseSupervisorResourceId(session.identity.getResourceId());\n  if (!factoryProjectId) return;\n  const project = await deps.projects.getById({ id: factoryProjectId });\n  if (!project) return;\n  await session.state.set({\n    factoryProjectId,\n    factoryOrgId: project.orgId,\n  });\n  await hydrateFactorySession(session, {\n    orgId: project.orgId,\n    defaultModelId: project.defaultModelId ?? undefined,\n  });\n}\n"],"mappings":";;;AAgBA,MAAM,kBAAkB;AAIxB,SAAgB,qBAAqB,kBAAkC;CACrE,OAAO,GAAG,kBAAkB;AAC9B;;AAGA,SAAgB,mBAAmB,kBAAkC;CACnE,OAAO,qBAAqB,gBAAgB;AAC9C;AAEA,SAAgB,0BAA0B,YAAsD;CAC9F,IAAI,CAAC,YAAY,WAAW,eAAe,GAAG,OAAO;CACrD,MAAM,mBAAmB,WAAW,MAAM,EAAsB;CAChE,OAAO,iBAAiB,SAAS,IAAI,mBAAmB;AAC1D;;;;;;AAOA,eAAsB,uBAAuB,SAGT;CAClC,MAAM,EAAE,mBAAmB;CAC3B,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CAExE,MAAM,mBAAmB,0BADT,eAAe,IAAI,YACsB,CAAC,EAAE,UAAU;CACtE,IAAI,CAAC,kBAAkB,OAAO;CAC9B,MAAM,QAAQ,oBAAoB,8BAA8B,cAAc,CAAC;CAC/E,IAAI,CAAC,OAAO,OAAO;CAEnB,IAAI,CAAC,MADiB,QAAQ,SAAS,IAAI;EAAE;EAAO,IAAI;CAAiB,CAAC,GAC5D,OAAO;CACrB,OAAO;EAAE;EAAO;CAAiB;AACnC;;;;;;;AAQA,eAAsB,yBACpB,SACA,MACe;CACf,MAAM,mBAAmB,0BAA0B,QAAQ,SAAS,cAAc,CAAC;CACnF,IAAI,CAAC,kBAAkB;CACvB,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,iBAAiB,CAAC;CACpE,IAAI,CAAC,SAAS;CACd,MAAM,QAAQ,MAAM,IAAI;EACtB;EACA,cAAc,QAAQ;CACxB,CAAC;CACD,MAAM,sBAAsB,SAAS;EACnC,OAAO,QAAQ;EACf,gBAAgB,QAAQ,kBAAkB,KAAA;CAC5C,CAAC;AACH"}
+{"version":3,"file":"session.js","names":[],"sources":["../../src/supervisor/session.ts"],"sourcesContent":["/**\n * The supervisor session: one per factory, addressed by a self-describing\n * resourceId so a restarted server can recover its scope without a lookup\n * table. The session has no repository, no sandbox and no work-item seat —\n * its tools talk to storage directly.\n */\n\nimport type { MastraCodeState } from '@mastra/code-sdk/schema';\nimport type { AgentController, AgentControllerRequestContext } from '@mastra/core/agent-controller';\nimport type { RequestContext } from '@mastra/core/request-context';\n\nimport { getFactoryAuthOrgId, getFactoryAuthUserFromContext } from '../auth.js';\nimport { primeTenantCredentialsForTenant } from '../routes/tenant-credentials.js';\nimport { hydrateFactorySession, resolveFactorySessionModel } from '../session/factory-session.js';\nimport type { ModelDefaultsStorage } from '../storage/domains/model-defaults/base.js';\nimport type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';\nimport type { SupervisorScope } from './read-tools.js';\n\nconst RESOURCE_PREFIX = 'factory-supervisor:';\n\ntype FactorySession = Awaited<ReturnType<AgentController<MastraCodeState>['createSession']>>;\n\nexport function supervisorResourceId(factoryProjectId: string): string {\n  return `${RESOURCE_PREFIX}${factoryProjectId}`;\n}\n\n/** The supervisor thread shares the session's id: one thread per factory. */\nexport function supervisorThreadId(factoryProjectId: string): string {\n  return supervisorResourceId(factoryProjectId);\n}\n\nexport function parseSupervisorResourceId(resourceId: string | undefined | null): string | null {\n  if (!resourceId?.startsWith(RESOURCE_PREFIX)) return null;\n  const factoryProjectId = resourceId.slice(RESOURCE_PREFIX.length);\n  return factoryProjectId.length > 0 ? factoryProjectId : null;\n}\n\n/**\n * Scope a request to a supervisor session the caller is allowed to drive:\n * the resourceId must name a project, and the caller's org must own it.\n * Anything else yields null and the supervisor tools stay unregistered.\n */\nexport async function resolveSupervisorScope(options: {\n  requestContext: RequestContext | undefined;\n  projects: Pick<FactoryProjectsStorage, 'get'>;\n}): Promise<SupervisorScope | null> {\n  const { requestContext } = options;\n  if (!requestContext || typeof requestContext.get !== 'function') return null;\n  const context = requestContext.get('controller') as AgentControllerRequestContext<MastraCodeState> | undefined;\n  const factoryProjectId = parseSupervisorResourceId(context?.resourceId);\n  if (!factoryProjectId) return null;\n  const orgId = getFactoryAuthOrgId(getFactoryAuthUserFromContext(requestContext));\n  if (!orgId) return null;\n  const project = await options.projects.get({ orgId, id: factoryProjectId });\n  if (!project) return null;\n  return { orgId, factoryProjectId };\n}\n\n/**\n * Session-start hook: stamp the owning project onto a supervisor session and\n * apply the factory's default model. Runs on every (re)creation so a restarted\n * server heals the in-memory state. Sessions\n * that are not supervisors are left untouched.\n */\nexport async function hydrateSupervisorSession(\n  session: FactorySession,\n  deps: {\n    projects: FactoryProjectsStorage;\n    modelDefaults: ModelDefaultsStorage;\n  },\n): Promise<void> {\n  const factoryProjectId = parseSupervisorResourceId(session.identity.getResourceId());\n  if (!factoryProjectId) return;\n  const project = await deps.projects.getById({ id: factoryProjectId });\n  if (!project) return;\n  const sessionModel = await resolveFactorySessionModel({\n    projects: deps.projects,\n    modelDefaults: deps.modelDefaults,\n    factoryProjectId,\n    orgId: project.orgId,\n    ownerUserId: project.createdBy,\n  });\n  await session.state.set({\n    factoryProjectId,\n    factoryOrgId: project.orgId,\n    factoryModelScope: sessionModel.modelScope,\n    factoryOwnerUserId: project.createdBy,\n  });\n  await primeTenantCredentialsForTenant({\n    orgId: project.orgId,\n    userId: project.createdBy,\n    credentialScope: sessionModel.modelScope,\n  });\n  await hydrateFactorySession(session, {\n    orgId: project.orgId,\n    modelScope: sessionModel.modelScope,\n    ownerUserId: project.createdBy,\n    defaultModelId: sessionModel.modelId,\n  });\n}\n"],"mappings":";;;;AAkBA,MAAM,kBAAkB;AAIxB,SAAgB,qBAAqB,kBAAkC;CACrE,OAAO,GAAG,kBAAkB;AAC9B;;AAGA,SAAgB,mBAAmB,kBAAkC;CACnE,OAAO,qBAAqB,gBAAgB;AAC9C;AAEA,SAAgB,0BAA0B,YAAsD;CAC9F,IAAI,CAAC,YAAY,WAAW,eAAe,GAAG,OAAO;CACrD,MAAM,mBAAmB,WAAW,MAAM,EAAsB;CAChE,OAAO,iBAAiB,SAAS,IAAI,mBAAmB;AAC1D;;;;;;AAOA,eAAsB,uBAAuB,SAGT;CAClC,MAAM,EAAE,mBAAmB;CAC3B,IAAI,CAAC,kBAAkB,OAAO,eAAe,QAAQ,YAAY,OAAO;CAExE,MAAM,mBAAmB,0BADT,eAAe,IAAI,YACsB,CAAC,EAAE,UAAU;CACtE,IAAI,CAAC,kBAAkB,OAAO;CAC9B,MAAM,QAAQ,oBAAoB,8BAA8B,cAAc,CAAC;CAC/E,IAAI,CAAC,OAAO,OAAO;CAEnB,IAAI,CAAC,MADiB,QAAQ,SAAS,IAAI;EAAE;EAAO,IAAI;CAAiB,CAAC,GAC5D,OAAO;CACrB,OAAO;EAAE;EAAO;CAAiB;AACnC;;;;;;;AAQA,eAAsB,yBACpB,SACA,MAIe;CACf,MAAM,mBAAmB,0BAA0B,QAAQ,SAAS,cAAc,CAAC;CACnF,IAAI,CAAC,kBAAkB;CACvB,MAAM,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE,IAAI,iBAAiB,CAAC;CACpE,IAAI,CAAC,SAAS;CACd,MAAM,eAAe,MAAM,2BAA2B;EACpD,UAAU,KAAK;EACf,eAAe,KAAK;EACpB;EACA,OAAO,QAAQ;EACf,aAAa,QAAQ;CACvB,CAAC;CACD,MAAM,QAAQ,MAAM,IAAI;EACtB;EACA,cAAc,QAAQ;EACtB,mBAAmB,aAAa;EAChC,oBAAoB,QAAQ;CAC9B,CAAC;CACD,MAAM,gCAAgC;EACpC,OAAO,QAAQ;EACf,QAAQ,QAAQ;EAChB,iBAAiB,aAAa;CAChC,CAAC;CACD,MAAM,sBAAsB,SAAS;EACnC,OAAO,QAAQ;EACf,YAAY,aAAa;EACzB,aAAa,QAAQ;EACrB,gBAAgB,aAAa;CAC/B,CAAC;AACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/factory",
-  "version": "0.23.0-alpha.1",
+  "version": "0.23.0-alpha.2",
   "description": "Mastra Software Factory module: the server core behind the Mastra Software Factory — storage domains, integrations, and surfaces for agent-powered software delivery",
   "type": "module",
   "publishConfig": {
@@ -57,11 +57,11 @@
     "hono": "^4.13.7",
     "posthog-node": "^5.46.1",
     "zod": "^4.6.4",
-    "@mastra/auth-studio": "1.3.9",
     "@mastra/auth-workos": "1.6.6",
-    "@mastra/code-sdk": "1.14.0-alpha.1",
-    "@mastra/core": "1.78.0-alpha.1",
-    "@mastra/slack": "1.7.2"
+    "@mastra/code-sdk": "1.14.0-alpha.2",
+    "@mastra/auth-studio": "1.3.9",
+    "@mastra/slack": "1.7.2",
+    "@mastra/core": "1.78.0-alpha.2"
   },
   "devDependencies": {
     "@types/node": "22.20.1",
@@ -72,9 +72,10 @@
     "vitest": "4.1.11",
     "@internal/lint": "0.0.143",
     "@mastra/pg": "1.31.2-alpha.0",
-    "@internal/types-builder": "0.0.118",
     "@internal/workspace": "0.0.15",
-    "@mastra/libsql": "1.26.2-alpha.0"
+    "@mastra/libsql": "1.26.2-alpha.0",
+    "@mastra/server": "1.78.0-alpha.2",
+    "@internal/types-builder": "0.0.118"
   },
   "engines": {
     "node": ">=22.19.0"